[Snyk] Fix for 10 vulnerabilities

[titanism]

Snyk has created this PR to fix 10 vulnerabilities in the yarn dependencies of this project.

Snyk changed the following file(s):

• package.json
• yarn.lock

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	696
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	696
	Prototype Pollution SNYK-JS-INI-1048974	686
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NORMALIZEURL-1296539	589
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	586
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HTTPCACHESEMANTICS-3248783	586
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	586
	Information Exposure SNYK-JS-NODEFETCH-2342118	539
	Prototype Pollution SNYK-JS-MINIMIST-2429795	506
	Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251	479

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@mrmlnc/readdir-enhanced@2.2.1	filesystem	0	53.9 kB	mrmlnc
npm/@nodelib/fs.stat@1.1.3	filesystem	0	8.88 kB	mrmlnc
npm/@octokit/auth-token@3.0.4	None	0	24.2 kB	octokitbot
npm/@octokit/core@4.2.4	None	0	43.7 kB	octokitbot
npm/@octokit/endpoint@7.0.6	None	0	87.4 kB	octokitbot
npm/@octokit/graphql@5.0.6	None	0	38.7 kB	octokitbot
npm/@octokit/openapi-types@18.1.1	None	0	4.23 MB	octokitbot
npm/@octokit/plugin-paginate-rest@6.1.2	None	0	196 kB	octokitbot
npm/@octokit/plugin-rest-endpoint-methods@7.2.3	None	0	1.5 MB	octokitbot
npm/@octokit/request-error@3.0.3	None	0	21.7 kB	octokitbot
npm/@octokit/request@6.2.8	network	0	54.7 kB	octokitbot
npm/@octokit/rest@19.0.13	None	0	9.82 kB	octokitbot
npm/@octokit/tsconfig@1.0.2	None	0	2.63 kB	octokitbot
npm/@octokit/types@9.3.2	None	0	228 kB	octokitbot
npm/ansi-regex@4.1.0	None	0	5.14 kB	sindresorhus
npm/array-union@2.1.0	None	0	3.17 kB	sindresorhus
npm/assign-symbols@1.0.0	None	0	5.85 kB	phated
npm/call-me-maybe@1.0.2	None	0	3.79 kB	limulus
npm/chardet@0.7.0	filesystem	0	74.8 kB	runk
npm/cli-spinners@2.9.2	None	0	32.1 kB	sindresorhus
npm/clone@1.0.4	None	0	11.1 kB	pvorb
npm/co@3.1.0	None	0	14.1 kB	tjholowaychuk
npm/conf@2.2.0	filesystem	0	12.6 kB	sindresorhus
npm/defaults@1.0.4	None	0	3.84 kB	sindresorhus
npm/dir-glob@3.0.1	None	0	5.42 kB	sindresorhus
npm/escape-goat@4.0.0	None	0	6.28 kB	sindresorhus
npm/external-editor@3.1.0	environment, filesystem, shell	0	27 kB	mrkmg
npm/fast-glob@2.2.7	None	0	126 kB	mrmlnc
npm/fs-extra@7.0.1	filesystem	0	124 kB	ryanzim
npm/github-username@8.0.0	None	0	4.21 kB	sindresorhus
npm/glob-parent@3.1.0	None	0	6.04 kB	es128
npm/glob-to-regexp@0.3.0	None	0	17.6 kB	nickfitzgerald
npm/globby@11.0.1	filesystem	0	21.5 kB	sindresorhus
npm/hash-sum@1.0.2	None	0	6.49 kB	bevacqua
npm/inquirer@6.5.2	None	0	77.9 kB	sboudrias
npm/is-glob@3.1.0	None	0	8.59 kB	jonschlinkert
npm/is-in-ci@1.0.0	None	0	4.07 kB	sindresorhus
npm/joycon@2.2.5	environment, filesystem	0	17.7 kB	egoist
npm/jstransformer-ejs@0.2.0	filesystem	0	3.83 kB	robloach
npm/majo@0.6.3	filesystem	0	11 kB	egoist
npm/merge2@1.4.1	None	0	8.9 kB	zensh
npm/node-fetch@2.6.7	network	0	152 kB	endless
npm/ora@3.4.0	environment	0	17.8 kB	sindresorhus
npm/parse-package-name@0.1.0	None	0	4.04 kB	rem
npm/path-dirname@1.0.2	None	0	6.26 kB	es128
npm/pupa@3.1.0	None	0	6.92 kB	sindresorhus
npm/resolve-from@4.0.0	filesystem, unsafe	0	4.64 kB	sindresorhus
npm/rxjs@6.6.7	None	0	5.13 MB	blesh
npm/sao@1.4.1	environment, filesystem	0	38.1 kB	egoist
npm/slash@4.0.0	None	0	3.83 kB	sindresorhus
npm/source-map@0.5.7	None	0	766 kB	tromey
npm/strip-ansi@5.2.0	None	0	4.17 kB	sindresorhus
npm/tslib@1.14.1	None	0	34 kB	typescript-bot
npm/update-notifier@7.3.0	environment	0	14.9 kB	sindresorhus
npm/wcwidth@1.0.1	None	0	14.2 kB	timoxley
npm/yarn-global@1.2.0	environment, filesystem	0	5.44 kB	rem

🚮 Removed packages: npm/@octokit/auth-token@2.4.5), npm/@octokit/core@3.6.0), npm/@octokit/endpoint@6.0.11), npm/@octokit/graphql@4.6.1), npm/@octokit/openapi-types@6.0.0), npm/@octokit/plugin-paginate-rest@2.17.0), npm/@octokit/plugin-rest-endpoint-methods@5.13.0), npm/@octokit/request-error@2.1.0), npm/@octokit/request@5.4.15), npm/@octokit/rest@18.12.0), npm/@octokit/types@6.13.0), npm/ansi-regex@3.0.0), npm/array-union@1.0.2), npm/array-uniq@1.0.3), npm/chardet@0.4.2), npm/cli-spinners@1.3.1), npm/co@4.6.0), npm/conf@1.4.0), npm/escape-goat@2.1.1), npm/external-editor@2.2.0), npm/fs-exists-sync@0.1.0), npm/fs-extra@4.0.3), npm/git-config-path@1.0.1), npm/github-username@6.0.0), npm/glob-parent@5.1.2), npm/globby@6.1.0), npm/handlebars@4.7.7), npm/has-yarn@2.1.0), npm/homedir-polyfill@1.0.3), npm/inquirer@3.3.0), npm/is-glob@4.0.1), npm/is-yarn-global@0.3.0), npm/jstransformer-ejs@0.0.3), npm/jstransformer-handlebars@1.1.0), npm/kopy@8.3.1), npm/majo@0.5.1), npm/neo-async@2.6.2), npm/node-fetch@2.6.1), npm/object-assign@4.1.1), npm/ora@1.4.0), npm/parse-git-config@1.1.1), npm/parse-passwd@1.0.0), npm/pinkie-promise@2.0.1), npm/pinkie@2.0.4), npm/pupa@2.1.1), npm/resolve-from@5.0.0), npm/rx-lite-aggregates@4.0.8), npm/rx-lite@4.0.8), npm/rxjs@7.5.5), npm/sao@0.22.17), npm/slash@3.0.0), npm/source-map@0.6.1), npm/strip-ansi@4.0.0), npm/tildify@1.2.0), npm/tslib@2.4.0), npm/uglify-js@3.13.4), npm/update-notifier@5.1.0), npm/wordwrap@1.0.0), npm/yarn-install@1.0.0)

View full report↗︎